Hacker's Guide to UART Root Shells

Flashback Team
64.300 Abonnenten
<__slot-el>
<__slot-el>
523.165 Aufrufe vor 4 Jahren
Learn tricks and techniques like these, with us, in our amazing training courses! https://flashback.sh/training  …...mehr
...mehr
Keep up the videos very awesome! For someone new to hardware hacking what cheap devices could I try my hands on that has an UART interface?
Übersetzen in Sprache: Deutsch
98
Antworten
Hollywood Hacker: "I'm in the mainframe!" Real world hacker: paperclip bridge
Übersetzen in Sprache: Deutsch
57
Antworten
I had never considered before that you could take photos of both sides of the PCB and color traces in a photo editor. That's such a great idea!
Übersetzen in Sprache: Deutsch
44
Antworten
I'm lazy so I just usually try 9600, 19200 or 115200, works 99% of the time and is faster than reversing the baud rate. Of course for an educational video showing how you can calculate the baud rate is very good. Great video !
Übersetzen in Sprache: Deutsch
188
Antworten
In 1990, I built from scratch a few micro controllers and communicated with them using a serial interface and a terminal to configure them. This video brings back old memories and makes me glad that people are using the same technique.
Übersetzen in Sprache: Deutsch
33
Antworten
If I wanted to show someone an example of what a well presented, entertaining YouTube video looks like, I would show them this channel.
Übersetzen in Sprache: Deutsch
17
Antworten
Wow, impressive how you tought me serial communication in 17minutes when I have had quite hard to grasp it before. Very educational approch with practical example, and problem solving. Subscribed!
Übersetzen in Sprache: Deutsch
45
Antworten
Please keep doing these. I’m trying very hard to learn to do stuff like this, I literally have all the gear. But either I’m slogging through textbooks that are too boring to read, just poking around under the microscope and multimeter or with uart to usb, reading tutorials for already wide open -eg dev boards and generally struggling.
Übersetzen in Sprache: Deutsch
23
Antworten
This is an example of a perfect tutorial. Great pace, background info, and real-world examples. Thanks so much! Subscribed.
Übersetzen in Sprache: Deutsch
11
Antworten
Never seen anyone teaching something so easily! Love this thank you sir
Übersetzen in Sprache: Deutsch
1
Antworten
Simply brilliant. Thank you for explaining the concept of calculating the baud rate so beautifully.
Übersetzen in Sprache: Deutsch
12
Antworten
This video should be what youtube is all about. GREAT WORK teaching!
Übersetzen in Sprache: Deutsch
1
Antworten
By far the best thing on the internet for hardware hacking
Übersetzen in Sprache: Deutsch
5
Antworten
A lot of the times, the manufacturer will have vcc connected to ground on the board which is what locks hart down and makes it read only. By disconnecting them with a small tear (micro grinder works well for this so you can do repairs later) you open it up to read/write. This is not for all of them, but it is a cheap and effective way that they do, do it.
Übersetzen in Sprache: Deutsch
1
Antworten
You can also use well known 'screen' command instead of 'minicom'. Screen is usually used to create background sessions but also has functionality to support configurable serial connections.
Übersetzen in Sprache: Deutsch
4
Antworten
This is the best tutorial i have seen about usb to ttl. Thank you so much man for the help
Übersetzen in Sprache: Deutsch
1
Antworten
Very cool video. I just got my first root shell on an old Wi-fi range extender I had lying around.
Übersetzen in Sprache: Deutsch
8
Antworten
The teachers like you are very much needed, this is how you make make fans...❤+1
Übersetzen in Sprache: Deutsch
Antworten
7:20 - In most cases, which pin is the ground should be readily apparent. Usually all but one of them will have small traces connected. The one that has a large, wide trace is going to be the ground. Some PCBs, however, have a certain degree of protection by making the traces less visible. On those, a multimeter with continuity would be a necessity. This board is not one of those, as you can visibly see the North pin and the 2 South pins have small traces, and the odd one out is connected to the Board Common Ground. This works for simpler PCBs. It is the more complex ones - where the ground is less obvious - where you need to use this method.
Übersetzen in Sprache: Deutsch
4
Antworten
This was interesting and informative. One small nit. I've always heard this called asynchronous serial protocol, and the UART is the hardware component that emits the protocol.
Übersetzen in Sprache: Deutsch
7
Antworten
excellent video. well explained and visualized. keep up the good work. subscribed.
Übersetzen in Sprache: Deutsch
11
Antworten
1. What logic analyzer model are you using? 2. What software for analyzing the image traces is that?
Übersetzen in Sprache: Deutsch
1
Antworten
I am surprised that such a good video has less view from researchers.
Übersetzen in Sprache: Deutsch
1
Antworten
this is amazing. this is the first video of this kind that I watched and was so educational. thank you very much
Übersetzen in Sprache: Deutsch
1
Antworten
I just purchased a TPLink Archer identical to the one you have just shown in the video. That's handy to know!!!
Übersetzen in Sprache: Deutsch
1
Antworten
You also need to take a note of the max voltage. The adapter used in this video support 5v and 3.3v and 3.3v was selected. Makse sure your adaptor support the voltage appropriate voltage level or you can fry something up.
Übersetzen in Sprache: Deutsch
Antworten
Thanks for documenting this. I got a root shell on my Archer C9 back in 2016 with the same simple UART interface.
Übersetzen in Sprache: Deutsch
4
Antworten
Amazing step by step explanation. Thank you very very much.
Übersetzen in Sprache: Deutsch
1
Antworten
i don't think ill ever use this but i learned a lot about serial. Thanks
Übersetzen in Sprache: Deutsch
1
Antworten
Great tutorial. Thanks for sharing your knowledge!
Übersetzen in Sprache: Deutsch
6
Antworten
One thing to note about baud rate is that the whole number integer values are not the only values you can use. There are fractional rates that are available, depending on the CLK frequency. Look up any of the older UART ICs and you should find the info.
Übersetzen in Sprache: Deutsch
4
Antworten
HW dev here. You are very lucky with the devices you showed. I don't know any device, which my company developed where you can do such attacks. But nice video!
Übersetzen in Sprache: Deutsch
1
Antworten
What is the 3.3 or 5 volt of the uart for? I don't see that they use it and it comes there on the USB! If I do it on a camera as they say in the video, I don't need tftp or is that mandatory? I'm bad at this and I don't understand tftp. I damaged my camera by installing the wrong firmware but it turns on but I can't connect to it anywhere, I only see the infrared LEDs and that's it. Do you think this works with that software in the tutorial?
Übersetzen in Sprache: Deutsch
Antworten
As a beginner, this video is great! May I ask if there are any cheap IOT devices (such as cameras) that I can try to get started with? I want to use UART to complete IOT forensics, but I don't know which models of devices can be used to try.
Übersetzen in Sprache: Deutsch
1
Antworten
Hi, how are the cables that you are using to connect to the pcb call?, I´m trying to get some, but i just cant not find them.
Übersetzen in Sprache: Deutsch
Antworten
Very informative video.. Love from India
Übersetzen in Sprache: Deutsch
2
Antworten
Hi. Do you think it might be possible to interface with SIP chips like macbook WiFi ICs? Since 2020 apple uses embedded WiFi SIP with onboard SPI ROM which stores MAC and SN. The problem is that it is also bonded to CPU, so there are thousands of macs with signature damage (due to design WiFi chip dies after water damage in very high amount of cases). Unfortunately this causes the device to crash on boot and it wont work with different IC. There are UART testpoints around this IC, so I was wondering if there is a chance that such specific chip might he hacked to work on different board.
Übersetzen in Sprache: Deutsch
Antworten
Excelente video 👌. Tengo una cámara china yoosee cómo hago para flashear un firmware por uart ? . Gracias
Übersetzen in Sprache: Deutsch
Antworten
It's really cool seeing this as an electronic engineer, it looks like a western chef learning an Asian recipe
Übersetzen in Sprache: Deutsch
5
Antworten
Following a trace with digital image software is very clever.
Übersetzen in Sprache: Deutsch
1
Antworten
excellent video. well explained and visualized. keep up the good work. subscribed.
Übersetzen in Sprache: Deutsch
11
Antworten
1. What logic analyzer model are you using? 2. What software for analyzing the image traces is that?
Übersetzen in Sprache: Deutsch
1
Antworten
I am surprised that such a good video has less view from researchers.
Übersetzen in Sprache: Deutsch
1
Antworten
this is amazing. this is the first video of this kind that I watched and was so educational. thank you very much
Übersetzen in Sprache: Deutsch
1
Antworten
I just purchased a TPLink Archer identical to the one you have just shown in the video. That's handy to know!!!
Übersetzen in Sprache: Deutsch
1
Antworten
You also need to take a note of the max voltage. The adapter used in this video support 5v and 3.3v and 3.3v was selected. Makse sure your adaptor support the voltage appropriate voltage level or you can fry something up.
Übersetzen in Sprache: Deutsch
Antworten
Thanks for documenting this. I got a root shell on my Archer C9 back in 2016 with the same simple UART interface.
Übersetzen in Sprache: Deutsch
4
Antworten
Amazing step by step explanation. Thank you very very much.
Übersetzen in Sprache: Deutsch
1
Antworten
i don't think ill ever use this but i learned a lot about serial. Thanks
Übersetzen in Sprache: Deutsch
1
Antworten
Great tutorial. Thanks for sharing your knowledge!
Übersetzen in Sprache: Deutsch
6
Antworten
One thing to note about baud rate is that the whole number integer values are not the only values you can use. There are fractional rates that are available, depending on the CLK frequency. Look up any of the older UART ICs and you should find the info.
Übersetzen in Sprache: Deutsch
4
Antworten
HW dev here. You are very lucky with the devices you showed. I don't know any device, which my company developed where you can do such attacks. But nice video!
Übersetzen in Sprache: Deutsch
1
Antworten
What is the 3.3 or 5 volt of the uart for? I don't see that they use it and it comes there on the USB! If I do it on a camera as they say in the video, I don't need tftp or is that mandatory? I'm bad at this and I don't understand tftp. I damaged my camera by installing the wrong firmware but it turns on but I can't connect to it anywhere, I only see the infrared LEDs and that's it. Do you think this works with that software in the tutorial?
Übersetzen in Sprache: Deutsch
Antworten
As a beginner, this video is great! May I ask if there are any cheap IOT devices (such as cameras) that I can try to get started with? I want to use UART to complete IOT forensics, but I don't know which models of devices can be used to try.
Übersetzen in Sprache: Deutsch
1
Antworten
Hi, how are the cables that you are using to connect to the pcb call?, I´m trying to get some, but i just cant not find them.
Übersetzen in Sprache: Deutsch
Antworten
Very informative video.. Love from India
Übersetzen in Sprache: Deutsch
2
Antworten
Hi. Do you think it might be possible to interface with SIP chips like macbook WiFi ICs? Since 2020 apple uses embedded WiFi SIP with onboard SPI ROM which stores MAC and SN. The problem is that it is also bonded to CPU, so there are thousands of macs with signature damage (due to design WiFi chip dies after water damage in very high amount of cases). Unfortunately this causes the device to crash on boot and it wont work with different IC. There are UART testpoints around this IC, so I was wondering if there is a chance that such specific chip might he hacked to work on different board.
Übersetzen in Sprache: Deutsch
Antworten
Excelente video 👌. Tengo una cámara china yoosee cómo hago para flashear un firmware por uart ? . Gracias
Übersetzen in Sprache: Deutsch
Antworten
It's really cool seeing this as an electronic engineer, it looks like a western chef learning an Asian recipe
Übersetzen in Sprache: Deutsch
5
Antworten
Following a trace with digital image software is very clever.
Übersetzen in Sprache: Deutsch
1
Antworten